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DETAILED ACTION 

1 . This action is in response to the Pre-Brief Appeal Conference request filed on 
November 7, 2005. Claims 1-10 and 13-16 are currently being considered. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms. the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-10 and 13-16 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kocher et al. (U.S Patent no. 6, 278, 783) in view of Chow et al. (U.S. 
Patent No. 6,594,761). 

Regarding claim 1, Kocher discloses: 

A countermeasure method against attacks by differential analysis of current 
consumption in an electronic component using a cryptographic algorithm having a 
secret key, comprising the following steps: 

"executing a first set of instructions in the algorithm that are critical to said 
attacks with a first manipulating means to deliver output data on the basis of 
input data" (Figures 1 and 2; column 1 , line 66 - column 2, line 24); 

"executing another set of said critical instructions with other manipulating 
means that are derived from said first manipulating means" (Figures 1 and 2; 
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column 1 , line 66 - column 2, line 24). Kocher does not explicitly disclose that this 
manipulating means is by "complementation of at least one of the input data and 
said output data, so that the output data and the data derived from said output 
data are unpredictable" Chow discloses a tamper-proofing encoding method that can 
be used with encryption protocols (see description of application of the method to DES, 
starting at column 20, line 28). Chow further discloses that the encoding method 
includes determining whether to perform an operation or its complement (column 18, 
line 50 - column 19, line 13). Therefore, it would have been obvious to one of ordinary 
skill in the art at the time of invention to further modify the method disclosed by Kocher 
by performing operations in either a normal or complemented state, in order to increase 
the tamper-resistance and obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 2 is rejected as applied above in rejecting claim 1 . Kocher does not explicitly 
teach that "first and other manipulating means are selected for use on the basis of 
one-half probability statistical relationship" Chow discloses randomly selecting 
whether to perform an operation or its complement (column 18, line 50 - column 19, line 
13), which provides a one-half probability statistical relationship. Therefore, it would 
have been obvious to one of ordinary skill in the art at the time of invention to further 
modify the method disclosed by Kocher by performing operations in either a normal or 
complemented state, in order to increase the tamper-resistance and obscurity of 
computer code (Chow, column 4, lines 3-9). 
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Claim 3 is rejected as applied above in rejecting claim 2. Kocherdoes not explicitly 
disclose a countermeasure method, wherein said "method comprises executing a 
first sequence and a second sequence, such that the order in which the 
sequences are executed is a function of the one-half probability statistical 
relationship" Chow discloses randomly selecting whether to perform an operation or 
its complement (column 18, line 50 - column 19, line 13), which provides a one-half 
probability statistical relationship. Therefore, it would have been obvious to one of 
ordinary skill in the art at the time of invention to further modify the method disclosed by 
Kocher by performing operations in either a normal or complemented state, in order to 
increase the tamper-resistance and obscurity of computer code (Chow, column 4, lines 
3-9). 

Claim 4 is rejected as applied above in rejecting claim 3. Furthermore, Kocher 
discloses: 

A countermeasure method according to claim 3, wherein "each of the first and 
second sequences is made up of the first three rounds" (column 4 lines 47-65), 
wherein the encryption operators can be of any type including DES, and further, can 
include any number of rounds that are in each of the respective encryption operators. 

Claim 5 is rejected as applied above in rejecting claim 3. Furthermore, Leppek 
discloses: 
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A countermeasure method according to claim 3. Kocher does not explicitly state 
"other manipulating means consist of second means such that, for the same 
input data, the complement of the output data of the first manipulating means is 
produced as output data." Chow discloses a tamper-proofing encoding method that 
can be used with encryption protocols (see description of application of the method to 
DES, starting at column 20, line 28). Chow further discloses that the encoding method 
includes determining whether to perform an operation or its complement (column 18, 
line 50 - column 19, line 13). Therefore, it would have been obvious to one of ordinary 
skill in the art at the time of invention to further modify the method disclosed by Kocher 
by performing operations in either a normal or complemented state, in order to increase 
the tamper-resistance and obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 6 is rejected as applied above in rejecting claim 2. Furthermore, Kocher 
discloses the use of a modified DES encryption algorithm which consists of sixteen 
rounds (Figure 1 ). Kocher does not explicitly disclose a countermeasure method, 
wherein said "method comprises executing a first sequence and a second 
sequence, such that the order in which the sequences are executed is a function 
of the one-half probability statistical relationship" Chow discloses randomly 
selecting whether to perform an operation or its complement (column 18, line 50 - 
column 19, line 13), which provides a one-half probability statistical relationship. 
Therefore, it would have been obvious to one of ordinary skill in the art at the time of 
invention to further modify the method disclosed by Kocher by performing operations in 
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either a normal or complemented state, in order to increase the tamper-resistance and 
obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Kocher 
discloses: 

A countermeasure method according to claim 6, wherein "each of the first and 
second sequences is made up of the last three rounds" (column 4 lines 47-65), 
wherein the encryption operators can be of any type including DES, and further, can 
include any number of rounds that are in each of the respective encryption operators; 
Kocher does not explicitly disclose "wherein the other manipulating means used in 
the second sequence comprise second manipulating means and a third 
manipulating means" Chow discloses a tamper-proofing encoding method that can be 
used with encryption protocols (see description of application of the method to DES, 
starting at column 20, line 28). Chow further discloses that the encoding method 
includes determining whether to perform an operation or its complement (column 18, 
line 50 - column 19, line 13), or a multiple of other operations (third manipulating 
means) which "results in a substantial increase in the number of operations relative to 
the original program" (Chow: column 19 lines 13-17). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time of invention to further modify the 
method disclosed by Kocher by performing operations in either a normal or 
complemented state, in order to increase the tamper-resistance and obscurity of 
computer code (Chow, column 4, lines 3-9). 
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Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Kocher 
discloses: 

A countermeasure method according to claim 7, wherein "said second 
manipulating means are used in the second sequence for the fourteenth round' 
(column 4 lines 47-65), wherein the encryption operators can be of any type including 
DES, and further, can include any manipulation in any of the rounds, including the 
fourteenth round of the respective encryption operation. Kocher does not explicitly 
disclose "second manipulating means are such that, for the same input data, the 
complement of the output data of the first manipulating means is produced as 
output data" Chow discloses a tamper-proofing encoding method that can be used 
with encryption protocols (see description of application of the method to DES, starting 
at column 20, line 28). Chow further discloses that the encoding method includes 
determining whether to perform an operation or its complement (column 18, line 50 - 
column 19, line 13). Therefore, it would have been obvious to one of ordinary skill in the 
art at the time of invention to further modify the method disclosed by Kocher by 
performing operations in either a normal or complemented state, in order to increase the 
tamper-resistance and obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Kocher 
discloses: 
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A countermeasure method according to claim 8, wherein "said third manipulating 

means are used in the second sequence for the fifteenth and the sixteenth round" 

(column 4 lines 47-65), wherein the encryption operators can be of any type including 

* 

DES, and further, can include any manipulation in any of the rounds, including the 
fourteenth round of the respective encryption operation. Kocher does not explicitly 
disclose "second manipulating means are such that, for the same input data, the 
complement of the output data of the first manipulating means is produced as 
output data" Chow discloses a tamper-proofing encoding method that can be used 
with encryption protocols (see description of application of the method to DES, starting 
at column 20, line 28). Chow further discloses that the encoding method includes 
determining whether to perform an operation or its complement (column 18, line 50 - 
column 19, line 13). Therefore, it would have been obvious to one of ordinary skill in the 
art at the time of invention to further modify the method disclosed by Kocher by 
performing operations in either a normal or complemented state, in order to increase the 
tamper-resistance and obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 10 is rejected as applied above in rejecting claim 1. Furthermore, Kocher 
discloses: 

A countermeasure method according to claim 1, wherein "manipulating means 
are constants tables" (column 7, lines 1 5-65). Kocher teaches the use of tables to 
manipulate data (column 7 lines 15-65), wherein the tables are used as a method to 
minimize information leakage when using a electric component such as a smart card. 
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The tables are filled with parameters (constants), which are preferably updated so that 
attackers cannot obtain the contents of the table by analysis of measurements. 

Regarding claim 13, Kocher discloses: 

An electronic component which provides countermeasures against attacks on a 
secret key cryptographic algorithm, comprising: 

"a program memory having stored therein a plurality of different 
manipulating means for producing output data in response to input data" (Figures 
1 and 2; column 1 , line 66 - column 2, line 24); 

"a processor which executes instructions in said algorithm that are critical 
to said attacks, in accordance with a selected one of said manipulating means" 
(Figures 1 and 2; column 1 , line 66 - column 2, line 24); and 

Kocher does not explicitly teach "means for generating a random value for selecting 
the manipulating means to be employed during a given execution of said 
algorithm, such that output data produced thereby is unpredictable" Chow 
discloses a tamper-proofing encoding method that can be used with encryption 
protocols (see description of application of the method to DES, starting at column 20, 
line 28). Chow further discloses that the encoding method includes determining 
whether to perform an operation or its complement (column 18, line 50 - column 19, line 
13). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
of invention to further modify the method disclosed by Kocher by performing operations 
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in either a normal or complemented state, in order to increase the tamper-resistance 
and obscurity of computer code (Chow, column 4, lines 3-9). 

Claim 14 is rejected as applied above in rejecting claim 13. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 13, wherein "manipulating means 
are constants tables" (column 7, lines 1 5-65). Kocher teaches the use of tables to 
manipulate data (column 7 lines 15-65), wherein the tables are used as a method to 
minimize information leakage when using a electric component such as a smart card. 
The tables are filled with parameters (constants), which are preferably updated so that 
attackers cannot obtain the contents of the table by analysis of measurements. 

Claim 15 is rejected as applied above in rejecting claim 13. Kocher does not explicitly 
disclose that "different manipulating means respectively produce sets of output 
data that are complementary to one another." Chow discloses a tamper-proofing 
encoding method that can be used with encryption protocols (see description of 
application of the method to DES, starting at column 20, line 28). Chow further 
discloses that the encoding method includes determining whether to perform an 
operation or its complement (column 18, line 50 - column 19, line 13). Therefore, it 
would have been obvious to one of ordinary skill in the art at the time of invention to 
further modify the method disclosed by Kocher by performing operations in either a 
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normal or complemented state, in order to increase the tamper-resistance and obscurity 
of computer code (Chow, column 4, lines 3-9). 

Claim 16 is rejected as applied in rejecting claim 13. Furthermore, Kocher discloses: 
The electronic component of claim 13, "wherein said component is a smart 
card" (see Abstract). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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